Cisco ISR 4331 - Static IP clients with DHCP Excluded Addresses have no network access

[varunoberoi]

I am using a ISR 4331 at my office with a DHCP server setup. The pool is 10.1.0.0 255.255.240.0

I have a DC server which when connected to the router gets assigned an ip from the pool.

But I now want the DC server to have a static ip of 10.1.0.2. I excluded this ip using an excluded-address command

ip dhcp excluded-address 10.1.0.2 10.1.0.150

(I excluded till 150 because there will be more clients with static ips)

The problem is that the DC server loses internet/network access when on a static IP. It gets it back when it set it to automatically detect ip, and it gets one from the router. 

What is the problem? I assumed that excluded-address command only tells the router to not assign those ips to clients.

Does it in fact remove the excluded ip range from the network altogether?

Image when DC Server adapter set to "Get IP automatically"

 

Image when DC server set to static ip:

[balaji.bandi]

ip dhcp excluded-address 10.1.0.1 10.1.0.150

make sure you exclude 1 address also from the exclusion list.

If you make static config that is fine and gateway configureed, but if you set up DHCP on Server it will not allocate from Exclude pool, rather you need make static reservation.

You need to add reservation in DHCP Server   (Like you need to do all the devices you like to make a static reservation) 

ip dhcp pool DCSERVER1

      host  10.1.0.2  255.255.240.0

      client-identifier  xxxxxxxxxxxxxx   - mac address

      default-router 10.1.0.1

      dns-server x.x.x.x x.x.x.x.

      domain-name MYDOMAIN

clear ip arp x.x.x.x.x -  on the router, since the Router already have MAC Address. - then configure static IP on Server and test it.

[varunoberoi]

But I have printers, switches, CCTV cameras.. All in all at least 100 devices which need a static ip. There has to be another way to do this!

[balaji.bandi]

Are you Looking to use client static IP manually configured? then you do not need anything extra here, configure manually (no manual work at DHCP Server-side) - but think that if the device set as DHCP then the device get DHCP range IP default.

So you need to make a decision, how you like to do this approach.

Make sure if this windows Server, there is a patch updated need to apply i do not in hand to give that information., try to disable the Ethernet configure and enable back (make sure you clear the ARP in DHCP Server Router).

[Georg Pauwen]

Hello,

in the screenshot with the static IP, there is no default gateway set. Did you manually assign that (10.1.0.1) ?

[varunoberoi]

Yes, I did. It still doesn't show it.

[Georg Pauwen]

Hello,

it still doesn't show it...that sounds like a problem with your NIC rather than anything else. When you disconnect the cable from the NIC4, can you then assign a static default gateway ?

[MHM Cisco World]

if there any dhcp snooping with secure feature IP guard, then the access is deny because you make PC/CCTV/Printer manually get IP and hence it IP and Mac not appear in DHCP binding table and not pass secure check.
please review this point